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DETAILED ACTION 

1 . This written rejection is responding to the amendment received on October 1 9 th , 
2004. 

2. Claims 1-5, 7-13, 15-21, and 23-27 are pending. 

Claim Rejections -35 USC §103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

1 . Claims 1 , 5, and 27 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kung, US Patent No. 5241594, in view of Wu, US Patent No. 6539479B1. 

2. As per claims 1 , 5, and 27, Kung teaches "a method for transmitting data 
securely between computers, said method comprising: establishing a secure connection 
between a first computer system and a second computer system, each of the computer 
systems connected to a computer network" in (Col 5 line 37 to Col 6 line 2, and Col 6 
lines 23-40); "sending a password from the first computer system to the second 
computer system across the secure connection" in (Col 6 lines 23-50); "encrypting one 
or more packets of data using the key as an encryption key and responsively 
deciphering the data packets using the key as the encryption key; transmitting the one 
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or more packets of data from one of the computer systems to the other computer 
system; deciphering the one or more packets of data at the receiving computer system 
using the key as the encryption keys" in (Col 6 lines 23-40); "sending a request from the 
first computer system to the second computer system prior to the establishing of the 
secure connection" in (Col 6 lines 23-40); and "responding to the request by the second 
computer system, the response further including: informing the first computer system 
that the second computer system accepts the data that is encrypted" in (Col 6 lines 23- 
40). However, Kung does not teach of implementing the password transferred over the 
secured communication as the encrypt/decryption keys. Nevertheless, Wu teaches a 
method of generating a session key to encrypt/decrypt information transmitting between 
a client and a server with a function of the user's password (Col 5 lines 45-53, and Col 6 
line 1-10). It would have been obvious at the time of the invention was made for one 
having ordinary skill in the art to modify Wu's teaching to use the simple password as 
the session key instead of spending processing time calculating the session key from 
the password and incorporate password session key with Kung's teaching to provide a 
simple-secured communication between two parties. 

4. Claims 2 and 3 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kung, in view of Wu, and further in view of Van Oorschot, US Patent No. 6317829B1. 

5. As per claims 2 and 3, Kung and Wu discloses the method as described in claim 
1 . However, Kung and Wu do not further teach the sending a second password based 
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on an event automatically, and the second password replacing the password as the 
encryption key. Nevertheless, Van Oorschot does teach a method of replacing the 
password when it is expired (Col 6 lines 21-32). Therefore, it would have been obvious 
at the time of the invention was made for one having ordinary skill in the art to 
incorporate Van Oorschot teaching with Kung's and Wu's method to ensure a high 
security level of encryption at all time. 

6. Claims 4 and 7 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kung, in view of Wu, and further in view of Tachibana, Noriyuki (JP/363039228A). 

7. As per claims 4 and 7, Kung and Wu disclose the method as described in claims 

1 . However, Kung and Wu do not teach the changing the password using the counter as 
part of the password and incremented the counter after each transmission. 
Nevertheless, Tachibana, Noriyuki discloses the "Secret securing system" invention, 
which teaches a method of using of the inputted digit as part of the password (also well 
known in the art as Counter) as password information and the time interval of the 
inputting a password to check the validity of the password (See the Constitution and 
Abstract); It is obvious at the time of the invention was made for one of ordinary skill in 
the art to incorporate the timer (counter) as pad of the password to expire the password 
or ensure the validity of the password before accessing a secured resource (See the 
last sentence of the constitution). Since the password transmission increment the input 
digit of the password, it is also obvious that the transmission input digit here can be 
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preset to expire the password or initialize the sending of a replacement password (See 
the 2nd d 3rd sentence of the Constitution). 

8. Claims 8, 9, and 10 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kung in view of Wu, and further in view of Eberle et al (US-4249180). 

9. As per claims 8, 9, and 10, Kung and Wu disclose the method and the apparatus 
as described in claim 1 . However, Kung and Wu do not teach: the method of encrypting 
the data selectively; selection is based on determining a sensitivity of the data; analyze 
and determine the data packet is encrypted or not before deciphering it. Nevertheless, 
Eberle et al disclose the "Past dependent microcomputer cipher apparatus" invention, 
which includes all the features above. Eberle et al teach the use of the predetermined 
control characters of the encoded data to selectively encrypting or deciphering (Col 1 
lines 5-10). The predetermined control character can be used to mark the sensitive 
data. Therefore it would be obvious at the time of the invention for one of ordinary skill 
in the art to combine method and as well the apparatus of Eberle et al with Scheidt 
method to ensure the integrity of the data file and to prevent hacker snooping the data 
content (Col 1 lines 20-25). Further more, Eberle et al invention mainly focus on a 
hardware apparatus. Nevertheless, the anticipation of using software instead of 
hardware to carry out the task is also clearly taught (Col 1 lines 45-55). 
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10. Claims 11, 12, 17, 19, 20, and 24 are rejected under 35 U.S.C. 103(a)as being 
unpatentable over Kung, in view of Wu, and further in view of Nendell et al, hereinafter 
"Nendeir (US/668321 B2). 

11. As per claims 11, 12, 17, 19, 20, and 24, Claim 1 is incorporated. However, 
neither Kung nor Wu teaches the sending a password from the first computer system to 
the second computer system. Nevertheless, Nendell discloses the "Verification of 
Identity of Participant in Electronic Communication" invention, which teaches a method 
of transmitting a password from the first computer to the second computer to unprotect 
(decrypt) the information (Col 3 lines 31-51). Therefore, it is obvious at the time of the 
invention was made for one of ordinary skill in the art to incorporate both teaching to 
allow the security initiation process of the sender and the receiver. 

12. Claims 13, 15, and 21 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Kung in view of Wu, further in view of Nendell, and further in view of 
Van Oorschot. 

13. As per claims 13, 15, and 21, Kung, Wu and Nendell disclose the method as 
described in claims 11, 13, and 19. However, Kung, Wu, and Nendell do not further 
teach the sending a second password based on an even automatically, and the second 
password replacing the password as the encryption key. Nevertheless, Van Oorschot 
does teach a method of replacing the password when it is expired (Col 6 lines 21-32). 
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Therefore, it is obvious at the time of the invention was made for one of ordinary skill in 
the art to incorporate Van oorschot teaching with Kung and Wu method to ensure a high 
security level of encryption at all time. 

14. Claims 16, 18, and 23 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Kung in view of Wu, further in view of Nendell, and further in view of 
Tachibana, Noriyuki. 

15. As per claims 16, 18, and 23, Kung, Wu, and Nendell disclose the method as 
described in claims 11,13, and 19. However, Kung, Wu, and Nendell do not teach the 
changing the password using the counter as part of the password and incremented the 
counter after each transmission. Nevertheless, Tachibana, Noriyuki discloses the 
"Secret securing system" invention, which teaches a method of using of the inputted 
digit as part of the password (also well known in the art as Counter) as password 
information and the time interval of the inputting a password to check the validity of the 
password (See the Constitution and Abstract). Therefore, It would have been obvious 
at the time of the invention was made for one of ordinary skill in the art to incorporate 
the timer (counter) as pad of the password to expire the password or ensure the validity 
of the password before accessing a secured resource (See the last sentence of the 
constitution). Since the password transmission increment the input digit of the 
password, it is also obvious that the transmission input digit here can be preset to expire 
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the password or initialize the ding of a replacement password (See the 2nd and 3rd 
sentence of the Constitution). 

16. Claims 25 and 26 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kung in view of Wu, further in view of Nendell, and fudher in view of Eberle. 

17. As per claims 25 and 26, Kung, Wu, and Nendell disclose the method and the 
apparatus as described in claim 19. However, Kung, Wu, and Nendell do not teach: the 
method of encrypting the data selectively 1 , selection is based on determining a 
sensitivity of the data; analyze and determine the data packet is encrypted or not before 
deciphering it. Nevertheless, Eberle et al disclose the "Past dependent microcomputer 
cipher apparatus" invention, which includes all the features above. Eberle et al teach 
the use of the predetermined control characters of the encoded data to selectively 
encrypting or deciphering (Col 1 lines 5-10). The predetermined control character can 
be used to mark the sensitive data. Therefore it would be obvious at the time of the 
invention for one of ordinary skill in the art to combine method and as well the apparatus 
of Eberle with Scheldt method to ensure the integrity of the data file and to prevent 
hacker snooping the data content (Col 1 lines 20-25). Further more, Eberle et al 
invention mainly focus on a hardware apparatus. Nevertheless, the anticipation of using 
software instead of hardware to carry out the task is also clearly taught (Col 1 lines 45- 
55). 
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Response to Arguments 

18. Applicant's arguments, see Amendment's Remark, filed on 10/19/2004, with 
respect to the rejection(s)of claim(s) 1-5, 7-13, 15-21 , and 23-27 under 103 rejection 
have been fully considered and are persuasive. Therefore, the rejection has been 
withdrawn. However, upon further consideration, a new ground(s) of rejection is made 
in view of Kung and Wu. 

Conclusion 

1 9. Any inquiry concerning this communication from the examiner should be directed 
to Linh Son whose telephone number is (571 )-271 -3856. 

20. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor Kim Y. Vu can be reached at (571)-272-3859. The fax numbers for this 
group are (703)-872-9306 (official fax). Any inquiry of general nature or relating to the 
status of this application or proceeding should be directed to the group receptionist 
whose telephone number is (571 )-272-21 00. 

21 . Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval IPAIR.I system. Status information for 
published applications may be obtained from either Private PMR or Public PMR. Status 
information for unpublished applications is available through Private PMR only. For 
more information about the PAIR system, see http://pzr-direct.uspto.gov. Should you 
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have questions on access to the Private F 
Center (EBC) at 866-217-9197 (toll-free). 
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system, contact the Electronic Business 



Linh LD Son 
Patent Examiner 



